Analysis
-
max time kernel
30s -
max time network
33s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
18-02-2025 19:31
General
-
Target
quarantine/pic5.exe
-
Size
421KB
-
MD5
59f2f7f0cf8faf41dbb0a7878b5d66bb
-
SHA1
0a96781c3e937cd7c12a052242f4755ea3656297
-
SHA256
683391c9e997f8e960c52edb11106157fb4bf122d21a0a72fe6a9a14ebacf584
-
SHA512
f3c6bc3fe42dbf48bda944817718298c9e23b7b6c08d7ff3142dfbc82b9a5070090ba80ce8dad8bc7b99e334f888bad3b6109142b5dc063a5ef73883f2b87ccd
-
SSDEEP
12288:MSasngwHpPE9JyzE7Q1Hlt/a7CLfznto3ZUsVB:gsngwHpPvgqFRaGLfDtMZUOB
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\quarantine\pic5.exe"C:\Users\Admin\AppData\Local\Temp\quarantine\pic5.exe"1⤵
- Writes to the Master Boot Record (MBR)
- System Location Discovery: System Language Discovery